unkin/terraform-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add puppetapi approle/policy

Browse Source
This commit is contained in:
Ben Vincent 2024-12-15 17:07:01 +11:00
parent bfda3f2f72
commit 63dd355311
3 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
auth_approle_puppetapi.tf Normal file
View File

@ -0,0 +1,14 @@
resource "vault_approle_auth_backend_role" "puppetapi" {
role_name = "puppetapi"
bind_secret_id = false
token_policies = ["puppetapi_read_tokens"]
token_ttl = 30
token_max_ttl = 30
token_bound_cidrs = [
"198.18.17.3/32",
"198.18.13.32/32",
"198.18.13.33/32",
"198.18.13.34/32",
"198.18.13.46/32"
]
}

3
policies.tf
View File

@ -11,7 +11,8 @@ locals {
"policies/rundeck",
"policies/ssh-host-signer",
"policies/sshca",
"policies/kv/service/glauth/services"
"policies/kv/service/glauth/services",
"policies/kv/service/puppetapi",
]
}

3
policies/kv/service/puppetapi/puppetapi_read_tokens.hcl Normal file
View File

@ -0,0 +1,3 @@
path "kv/data/service/puppetapi/tokens" {
capabilities = ["read"]
}